Skip to content

Does not check the Upgrade response Sec-WebSocket-Accept #334

@hishnash

Description

@hishnash

https://github.com/daltoniam/Starscream/blob/master/Source/WebSocket.swift#L581-L583

This should be validated as being equal:

SHA1(Sec_WebSocket_Key_Value + '258EAFA5-E914-47DA-95CA-C5AB0DC85B11')

The reason for this is to ensure that the web socket is not behind a caching layer.
see https://tools.ietf.org/html/rfc6455 page 24

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions